Topic: I was hacked (1170btc stolen) - 500btc max BOUNTY - page 24. (Read 35693 times)

Quote from: oda.krell on July 11, 2014, 10:42:49 AM

Wow... that's a freaking theft... The wallet was online I assume?

Electrum - dropbox was compromised (with plain txt for the pwd, I know I know..)

You are shitting me .. you kept >1000BTC and you had a txt file with your password on a dropbox.

I wish I can track those thieves but perhaps this will be not possible for me.

Kind regards.

PS. Lesson for newbies and not only: Never store your password anywhere else than in your brain OR write it down on a piece of a paper and keep it SAFE in a place that is known only for you! you can even slice it and keep in different places Cheesy

Change your password from time to time

...

david123

legendary

Activity: 1036

Merit: 1005

Electrum password alone isn't sufficient (assuming the attacker got it through your dropbox plain text file), he'd also need a copy of the electrum wallet file. Any idea how that was accessed?

If I understand the OP correctly, both the wallet file and a plaintext txt with the password were on a dropbox volume.

dlowings

full member

Activity: 226

Merit: 100

Quote from: cypherdoc on July 11, 2014, 10:20:51 AM

Quote from: dlowings on July 11, 2014, 10:10:03 AM

Quote from: jabo38 on July 11, 2014, 09:56:26 AM

How do you access drop box ? if you are serious and I have my doubts. Please clone your personal machine that you access drop box from and send it to me .. I would suspect that it was the machine that you access drop box from that is compromised . It does no good to even attempt to track this down via the block chain, the only hope is to identify the point of entry they used . I doubt you would pay up, but thats the only way your alleged crook would be found .

I don't know klee personally, but I have followed him before on the forums. I do know he has given away huge amounts of NXT before for bounties. One time a person's NXT account was hacked and I think it was klee that donated a pretty big chunk to the guy in the spirit of good will. My guess is that he is indeed seriously about a 500btc reward.

that may be… and I hope for the sake of the community you are correct .. but my point remains, and it rings true with what another person pointed out.. It was someone close / or had access to his habits via his personal machine.. I'm all for helping in any way I can, and I was trying to point out that whatever machine he uses to access his stuff more then likely was the eyes for the attacker . Just trying to put out there different ways for people to investigate this theft .. I doubt I can find the person, but with proper investigation the key would be to find the "how did he do it" and did he leave any tracks.. I am active in IRC and I see these script kiddies come in all day long talking about building wallet grabbers and back doors.. Its pathetic … It reminds me every day, why BTC needs over site of some sort .. Criminals need to be held accountable and addresses need ways to be black listed in some way.. I know this is a fire storm topic, but theft on this level with the amount of money involved will NEVER be good for BTC in the long run ..

blacklists are way overboard and would destroy bitcoin. He needs better security habits period.

I agree , trust me this is a VERY slippery slope …. any time you have to have a group of people step in and protect others from their own habits its a BAD thing… but bitcoin is to "wild west" right now, and that will have to be delta with until the next level of acceptance can be achieved .

oda.krell

legendary

Activity: 1470

Merit: 1007

Quote from: Divinespark on July 11, 2014, 10:35:50 AM

Wow... that's a freaking theft... The wallet was online I assume?

Electrum - dropbox was compromised (with plain txt for the pwd, I know I know..)

Sorry for the loss. No lecture about security practices from me, I'm sure you're already crushed about this enough.

That said:

Electrum password alone isn't sufficient (assuming the attacker got it through your dropbox plain text file), he'd also need a copy of the electrum wallet file. Any idea how that was accessed?

Or did you actually mean the 12-word "master seed"?

Keyara

full member

Activity: 174

Merit: 100

You had 1170 btc in an online wallet? Wow.
This sounds like possibly an inside job

First thought come into my mind too. Inside job is very likely and you probably are not even his first victim.

Divinespark

hero member

Activity: 938

Merit: 501

You had 1170 btc in an online wallet? Wow.
This sounds like possibly an inside job

glub0x

legendary

Activity: 892

Merit: 1013

Where are you from, how many poeple knew you had such an amount of bitcoin arround you?

RocketSingh

legendary

Activity: 1662

Merit: 1050

Contact DropBox

Ask them to have a security audit on your account and tell them to provide u all the details about the machines from where the login took place...

Follow: http://www.labnol.org/internet/dropbox-security-audit/19636/

cypherdoc

legendary

Activity: 1764

Merit: 1002

Quote from: dlowings on July 11, 2014, 10:10:03 AM

Quote from: jabo38 on July 11, 2014, 09:56:26 AM

Quote from: klee on July 11, 2014, 09:43:31 AM

How do you access drop box ? if you are serious and I have my doubts. Please clone your personal machine that you access drop box from and send it to me .. I would suspect that it was the machine that you access drop box from that is compromised . It does no good to even attempt to track this down via the block chain, the only hope is to identify the point of entry they used . I doubt you would pay up, but thats the only way your alleged crook would be found .

I don't know klee personally, but I have followed him before on the forums. I do know he has given away huge amounts of NXT before for bounties. One time a person's NXT account was hacked and I think it was klee that donated a pretty big chunk to the guy in the spirit of good will. My guess is that he is indeed seriously about a 500btc reward.

that may be… and I hope for the sake of the community you are correct .. but my point remains, and it rings true with what another person pointed out.. It was someone close / or had access to his habits via his personal machine.. I'm all for helping in any way I can, and I was trying to point out that whatever machine he uses to access his stuff more then likely was the eyes for the attacker . Just trying to put out there different ways for people to investigate this theft .. I doubt I can find the person, but with proper investigation the key would be to find the "how did he do it" and did he leave any tracks.. I am active in IRC and I see these script kiddies come in all day long talking about building wallet grabbers and back doors.. Its pathetic … It reminds me every day, why BTC needs over site of some sort .. Criminals need to be held accountable and addresses need ways to be black listed in some way.. I know this is a fire storm topic, but theft on this level with the amount of money involved will NEVER be good for BTC in the long run ..

blacklists are way overboard and would destroy bitcoin. He needs better security habits period.

RocketSingh

legendary

Activity: 1662

Merit: 1050

Quote from: RocketSingh on July 11, 2014, 09:36:44 AM

Quote from: klee on July 11, 2014, 09:16:45 AM

Quote from: jaberwock on July 11, 2014, 09:15:40 AM

That was hard to trace without other info. The bitcoins is transferred to new unused bitcoin address it can only be trace once it is moving again.

Bter froze his accts (he was trying to dump NXT for BTC) - they said they have info.

When I have more I will post.

That means Bter have some clue... can u plz offer a part of the bounty to them to get that clue ?

Good idea

Hope u dont forget me if u get back your bitcoins Wink

spazzdla

legendary

Activity: 1722

Merit: 1000

Quote from: enhu on July 11, 2014, 10:08:43 AM

Wow... that's a freaking theft... The wallet was online I assume?

Electrum - dropbox was compromised (with plain txt for the pwd, I know I know..)

.. whoa.. u were using something besides QT to store that many BTC :O?!?!?!

RocketSingh

legendary

Activity: 1662

Merit: 1050

Quote from: RocketSingh on July 11, 2014, 09:21:12 AM

Quote from: jabo38 on July 11, 2014, 09:56:26 AM

Wow... that's a freaking theft... The wallet was online I assume?

Electrum - dropbox was compromised (with plain txt for the pwd, I know I know..)

Are u sure that it is DropBox compromise... NOT address collision ?

Current Status

539BTC: https://blockchain.info/address/14DZ3Yjb39sDTMwKd19Ly4PK15BKZfLXWZ

631BTC: https://blockchain.info/address/1CEQCaXZuKx3bPRySUFvCpXthWAnExukFb

they now split it?

Seems they are waiting for 100 confirmation each and then will again split it, till it goes down to 50 BTC each. Then, there's a mixer to handle 50 BTC... forgot which one.

@Klee ...if u know that mixer... inform them early too. At some gate we'll definitely catch the thief.

dlowings

full member

Activity: 226

Merit: 100

Quote from: RocketSingh on July 11, 2014, 09:21:12 AM

How do you access drop box ? if you are serious and I have my doubts. Please clone your personal machine that you access drop box from and send it to me .. I would suspect that it was the machine that you access drop box from that is compromised . It does no good to even attempt to track this down via the block chain, the only hope is to identify the point of entry they used . I doubt you would pay up, but thats the only way your alleged crook would be found .

I don't know klee personally, but I have followed him before on the forums. I do know he has given away huge amounts of NXT before for bounties. One time a person's NXT account was hacked and I think it was klee that donated a pretty big chunk to the guy in the spirit of good will. My guess is that he is indeed seriously about a 500btc reward.

that may be… and I hope for the sake of the community you are correct .. but my point remains, and it rings true with what another person pointed out.. It was someone close / or had access to his habits via his personal machine.. I'm all for helping in any way I can, and I was trying to point out that whatever machine he uses to access his stuff more then likely was the eyes for the attacker . Just trying to put out there different ways for people to investigate this theft .. I doubt I can find the person, but with proper investigation the key would be to find the "how did he do it" and did he leave any tracks.. I am active in IRC and I see these script kiddies come in all day long talking about building wallet grabbers and back doors.. Its pathetic … It reminds me every day, why BTC needs over site of some sort .. Criminals need to be held accountable and addresses need ways to be black listed in some way.. I know this is a fire storm topic, but theft on this level with the amount of money involved will NEVER be good for BTC in the long run ..

enhu

legendary

Activity: 2492

Merit: 1018

Wow... that's a freaking theft... The wallet was online I assume?

Electrum - dropbox was compromised (with plain txt for the pwd, I know I know..)

Are u sure that it is DropBox compromise... NOT address collision ?

Current Status

539BTC: https://blockchain.info/address/14DZ3Yjb39sDTMwKd19Ly4PK15BKZfLXWZ

631BTC: https://blockchain.info/address/1CEQCaXZuKx3bPRySUFvCpXthWAnExukFb

they now split it?

bitcoiner49er

sr. member

Activity: 457

Merit: 250

They have been split to two new addresses; 14DZ3 and 1CEQC

jabo38

legendary

Activity: 1232

Merit: 1001

mining is so 2012-2013